During the z/OS IPL certain addresses spaces may initialize prior to the point when ACF2 is fully initialized. Those address spaces may not be able to successfully complete initUSP processing at z/OS 2.1 or above. The problem occurs because the group field in the ACEE for those address spaces contains '*' which does not match a group/GID defined to the ESM and the BPX.DEFAULT.USER GID is no longer used at z/OS 2.1 and above.

To address the INITUSP failure related to the CEA task CEA that initializes early in the IPL process it is strongly recommended that ACF2 is started as early as possible during system initialization using the CAISEC00 member in SYS1.PARMLIB.

We recommend creating a member called CAISEC00 in SYS1.PARMLIB to contain the ACF2 START commands. In CAISEC00, each entry specifies whether to start the ACF2 started task using the START command (that is, S ACF2 for CA ACF2) and points to other members of SYS1.PARMLIB. These SYS1.PARMLIB members contain additional operands for the START command and can e used to change default options.

See the ACF2 Installation section 'Start CA ACF2 Automatically' for detailed information about starting each started task and about using CAISEC00.